Static task
static1
Behavioral task
behavioral1
Sample
f69415bcf9b15edd61e07491998053ed_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f69415bcf9b15edd61e07491998053ed_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f69415bcf9b15edd61e07491998053ed_JaffaCakes118
-
Size
125KB
-
MD5
f69415bcf9b15edd61e07491998053ed
-
SHA1
8ba39fb9772c7733f14b69af35544c8ff1a79155
-
SHA256
98bf9a4187c774bb55a7acc29cd5d80c822e101bf341f5450fe30342be8d6709
-
SHA512
93d0843ca03b304b7c80133731ef9e70ef7845e5d38b573ade3ef36552edefe9b2f3ae63d8effd227a056087f2a23e1069469606ac35924257b85be4a19d428c
-
SSDEEP
3072:txn8oYePjjLpdccq94cOjSDXCfpLzAwY+qlx/:txnTrPlddRSrCxAwDql
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f69415bcf9b15edd61e07491998053ed_JaffaCakes118
Files
-
f69415bcf9b15edd61e07491998053ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE